apiVersion: "logging.openshift.io/v1"
kind: "ClusterLogging"
metadata:
  name: "instance" 
  namespace: "openshift-logging"
spec:
  managementState: "Managed"  
  logStore:
    type: "elasticsearch"  
    retentionPolicy: 
      application:
        maxAge: 10h
      infra:
        maxAge: 10h
      audit:
        maxAge: 10h
    elasticsearch:
      nodeCount: 3 
      storage: {} 
      resources: 
          limits:
            memory: "4Gi"
          requests:
            memory: "1Gi"
      proxy: 
        resources:
          limits:
            memory: 256Mi
          requests:
            memory: 256Mi
      redundancyPolicy: "SingleRedundancy"
  visualization:
    type: "kibana"  
    kibana:
      replicas: 1
  collection:
    type: "fluentd"

oc adm must-gather --image=$(oc -n openshift-logging get deployment.apps/cluster-logging-operator -o jsonpath='{.spec.template.spec.containers[?(@.name == "cluster-logging-operator")].image}')

$ oc adm must-gather --image=$(oc -n openshift-logging get deployment.apps/cluster-logging-operator -o jsonpath='{.spec.template.spec.containers[?(@.name == "cluster-logging-operator")].image}')
[must-gather      ] OUT Using must-gather plug-in image: registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator@sha256:7b17ceb5a190e7d496103fa0f3a37786c18bda4cc5f8847a486bfdaa0421702f
When opening a support case, bugzilla, or issue please include the following summary data along with any other requested information:
ClusterID: ef202076-5ceb-4f49-b393-9be7fc75a805
ClusterVersion: Stable at "4.11.0-0.nightly-2022-12-19-042947"
ClusterOperators:
All healthy and stable



[must-gather      ] OUT namespace/openshift-must-gather-tztmq created
[must-gather      ] OUT clusterrolebinding.rbac.authorization.k8s.io/must-gather-7x6ql created
Warning: would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (containers "gather", "copy" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (containers "gather", "copy" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or containers "gather", "copy" must set securityContext.runAsNonRoot=true), seccompProfile (pod or containers "gather", "copy" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
[must-gather      ] OUT pod for plug-in image registry.redhat.io/openshift-logging/cluster-logging-rhel8-operator@sha256:7b17ceb5a190e7d496103fa0f3a37786c18bda4cc5f8847a486bfdaa0421702f created